File size: 9543680 bytes
MD5...: acadaa6876b0d9d88bb525a7daf41b2f
SHA1..: b8cece76bcf26af7db8a0d43f4855443b7e48235
SHA256: c66bb11f650a5fec9f2c8032e60729d4bbe256f92984e23afa c6a53577e77c01
SHA512: 732a771d3f4745f0fde6866f83f21b2d0961f0ad9cf2f2b413 cf52c110640075
2ff5f21011555ccae2030f6338126d45f45fd99c6c1ca8f296 c886de419ed7ed
ssdeep: 98304:QSWspai3bzfxpo5HZJTMi2Rbr8nMbfScSt8M/Um7A/p2qWh4cPgEaWiYce
BbZMgD:LpG5rTMZf8FBsUhNc6sewZFZaD
PEiD..: -
TrID..: File type identification
Win32 Executable MS Visual C++ (generic) (65.2%)
Win32 Executable Generic (14.7%)
Win32 Dynamic Link Library (generic) (13.1%)
Generic Win/DOS Executable (3.4%)
DOS Executable Generic (3.4%)
PEInfo: PE Structure information
( base data )
entrypointaddress.: 0x9eb18f
timedatestamp.....: 0x49509af1 (Tue Dec 23 08:01:53 2008)
machinetype.......: 0x14c (I386)
( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x7e8d8a 0x7e9000 6.45 0871187ee3d6189c61636d1050095976
.rdata 0x7ea000 0xf8d60 0xf9000 4.72 be0028b1cb05ee8df1d96c6e332947ac
.data 0x8e3000 0x2a0f10 0x2d000 4.26 c2289f3c3ae1199e67152fef24d2aedb
.rsrc 0xb84000 0x9cb8 0xa000 4.55 858a0cb5720c1eaf0278542f4aae5494
( 16 imports )
> GDI32.dll: RemoveFontResourceA, AddFontResourceA, GetTextExtentPoint32A, GetTextExtentPoint32W, GetTextMetricsA, CreateFontIndirectA, DeleteDC, SetBkMode, SetPixel, GetPixel, GetStockObject, CreatePalette, RealizePalette, SelectPalette, SetPaletteEntries, CreateDIBitmap, DeleteObject, CreateDIBSection, GetDeviceGammaRamp, GetDIBits, SetBkColor, CreateSolidBrush, BitBlt, CreateCompatibleDC, SetDIBColorTable, CreateFontA, SetDeviceGammaRamp, SelectObject, SetTextColor, GetGlyphOutlineW, GetObjectA
> ADVAPI32.dll: GetUserNameA, OpenProcessToken, GetTokenInformation, EqualSid, RegCloseKey, RegSetValueExA, RegCreateKeyExA, FreeSid, RegOpenKeyExA, RegOpenKeyA, RegQueryValueExA, AllocateAndInitializeSid
> USER32.dll: CreateWindowExA, IsCharAlphaW, IsCharAlphaNumericW, SetCursorPos, ClientToScreen, PostMessageA, GetWindowThreadProcessId, EndDialog, SetWindowPos, GetActiveWindow, SetRect, GetKeyState, GetWindowRect, AdjustWindowRect, GetClientRect, GetDesktopWindow, IsClipboardFormatAvailable, SendMessageA, GetWindow, IsWindow, FindWindowA, SetFocus, CallNextHookEx, CallWindowProcA, UnhookWindowsHookEx, SetWindowLongA, GetWindowTextA, KillTimer, SetWindowTextA, SetTimer, MapDialogRect, DefWindowProcA, CreateDialogIndirectParamA, EndPaint, BeginPaint, PostQuitMessage, wsprintfA, SetCursor, ChangeDisplaySettingsA, OpenClipboard, EnumDisplaySettingsA, ClipCursor, GetClassLongA, GetMenu, SetMenu, DestroyAcceleratorTable, LoadMenuA, RegisterClassA, DestroyMenu, GetIconInfo, EnableWindow, CheckRadioButton, AppendMenuA, CreatePopupMenu, CreateMenu, CharNextExA, GetWindowLongA, SetWindowsHookExA, DestroyWindow, GetFocus, GetKeyboardLayout, ShowCaret, RegisterClassExA, HideCaret, LoadCursorA, LoadIconA, ShowWindow, DispatchMessageA, TranslateMessage, TranslateAcceleratorA, GetMessageA, PeekMessageA, RegisterHotKey, LoadAcceleratorsA, MessageBoxA, SetForegroundWindow, LoadStringA, MoveWindow, GetSystemMetrics, SetWindowTextW, GetClipboardData, CloseClipboard, SystemParametersInfoA, MessageBoxW, GetDC, ReleaseDC, UpdateWindow, GetDlgItem, GetCursorPos, ScreenToClient, CharNextA, CharNextW, DialogBoxParamA, IsDlgButtonChecked
> IMM32.dll: ImmGetConversionStatus, ImmNotifyIME, ImmSetCandidateWindow, ImmGetCompositionStringW, ImmGetContext, ImmReleaseContext, ImmGetProperty, ImmAssociateContext, ImmSetConversionStatus
> KERNEL32.dll: LCMapStringA, IsValidCodePage, GetOEMCP, GetCPInfo, HeapSize, HeapCreate, LCMapStringW, HeapReAlloc, VirtualAlloc, VirtualFree, FatalAppExitA, GetCurrentThread, TlsFree, SetHandleCount, GetFileType, GetConsoleCP, GetConsoleMode, GetTimeZoneInformation, SetConsoleCtrlHandler, FreeEnvironmentStringsA, GetEnvironmentStrings, HeapDestroy, FreeEnvironmentStringsW, InterlockedExchange, Sleep, ReadFile, CloseHandle, GetFileSize, CreateFileA, lstrlenA, GetLastError, InitializeCriticalSection, DeleteCriticalSection, EnterCriticalSection, LeaveCriticalSection, SetFilePointer, WideCharToMultiByte, InterlockedIncrement, InterlockedDecrement, ResetEvent, CreateEventA, DeleteFileA, WriteFile, CreateDirectoryA, SetCurrentDirectoryA, MultiByteToWideChar, SetEvent, WaitForSingleObject, CreateThread, GetModuleFileNameA, GetTickCount, GetCurrentThreadId, GetEnvironmentStringsW, GetVersion, GlobalUnlock, GlobalLock, Beep, GetProcAddress, GetModuleHandleA, CreateMutexA, WinExec, GetCurrentProcess, GetCurrentProcessId, GetLocalTime, SetUnhandledExceptionFilter, CompareStringA, FindClose, FindFirstFileA, FileTimeToSystemTime, FileTimeToLocalFileTime, GetFileTime, GetSystemDirectoryA, GetCommandLineA, FreeLibrary, LoadLibraryA, GetLocaleInfoA, GetThreadLocale, GetVersionExA, lstrcmpA, lstrcmpW, MapViewOfFile, CreateFileMappingA, CreateFileW, UnmapViewOfFile, LockResource, LoadResource, SizeofResource, FindResourceA, FindResourceW, GetSystemInfo, IsProcessorFeaturePresent, GetFullPathNameA, lstrcmpiA, HeapAlloc, GetProcessHeap, HeapFree, TlsSetValue, TlsAlloc, TlsGetValue, GetStdHandle, IsDebuggerPresent, TerminateProcess, GetStartupInfoA, UnhandledExceptionFilter, ExitProcess, GetSystemTimeAsFileTime, RaiseException, RtlUnwind, CopyFileA, SetFileAttributesA, GetFileAttributesA, GetCurrentDirectoryA, GlobalMemoryStatus, SetLastError, GlobalAlloc, GlobalFree, Process32First, Process32Next, CreateToolhelp32Snapshot, Module32First, OutputDebugStringA, Module32Next, QueryPerformanceCounter, VirtualQuery, GetTimeFormatA, GetDateFormatA, GetUserDefaultLCID, EnumSystemLocalesA, IsValidLocale, GetStringTypeA, GetStringTypeW, GetLocaleInfoW, SetStdHandle, FlushFileBuffers, WriteConsoleA, GetConsoleOutputCP, WriteConsoleW, SetEndOfFile, CompareStringW, SetEnvironmentVariableA, _lwrite, QueryPerformanceFrequency, MulDiv, lstrcpyA, ExitThread, lstrcatA, lstrcpynA, SuspendThread, ResumeThread, TerminateThread, GetExitCodeThread, SetThreadPriority, GetWindowsDirectoryA, CreateIoCompletionPort, PostQueuedCompletionStatus, GetQueuedCompletionStatus, FlushViewOfFile, ReleaseSemaphore, SleepEx, FlushInstructionCache, FindNextFileA, GetACP
> SHELL32.dll: ShellExecuteA, SHGetSpecialFolderPathA, ShellExecuteW, ExtractIconExA
> WININET.dll: InternetCloseHandle, InternetGetLastResponseInfoA, FtpSetCurrentDirectoryA, FtpCreateDirectoryA, FtpRemoveDirectoryA, FtpDeleteFileA, FtpRenameFileA, InternetOpenA, FtpOpenFileA, FtpPutFileA, FtpGetFileA, FtpGetCurrentDirectoryA, InternetFindNextFileA, FtpFindFirstFileA, InternetCrackUrlA, InternetConnectA, InternetWriteFile
> urlmon.dll: URLDownloadToFileA
> WS2_32.dll: WSASetEvent, -, -, WSAGetOverlappedResult, WSAResetEvent, -, -, -, -, -, -, -, -, -, WSAWaitForMultipleEvents, WSACloseEvent, -, WSARecvFrom, -, -, -, -, -, WSACreateEvent, -, -, -, -, -, WSASend, -, WSASocketA, -, WSAIoctl, WSARecv, -, WSASendTo
> VERSION.dll: VerQueryValueA, GetFileVersionInfoSizeA, GetFileVersionInfoA
> DDRAW.dll: DirectDrawCreateEx
> iphlpapi.dll: GetTcpTable, GetAdaptersInfo
> WINMM.dll: timeGetTime, mmioAscend, mmioRead, mmioGetInfo, mmioCreateChunk, mmioSeek, mmioSetInfo, mmioAdvance, mmioWrite, mmioClose, mmioOpenA, timeSetEvent, timeKillEvent, mmioDescend
> d3d9.dll: Direct3DCreate9
> ole32.dll: CoCreateGuid, CoInitialize, CoUninitialize
> DSOUND.dll: -
Hahahahah
nice Crypter list!! :D
-----> Fh <----- Noobs